This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
File:                     HdxT0d56LvfrK5DICRVUQUAEJIg.mft (raw, json)
Hash identifier:          2XOmwL6O1Ci0RRQEcXU2XyzHEMFwVx7wXn+4uPmCjCs=
Subject key identifier:   8F:EB:0E:D5:B0:52:93:2C:FD:77:FB:EE:C8:1B:DD:58:19:AB:44:F2
Authority key identifier: 1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88
Certificate issuer:       /CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
Certificate serial:       019B3C46F9669F8C6E4C70CE8516F28D862D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
Manifest number:          178D
Signing time:             Sat 20 Dec 2025 15:00:42 +0000
Manifest this update:     Sat 20 Dec 2025 15:00:42 +0000
Manifest next update:     Sun 21 Dec 2025 15:00:42 +0000
Files and hashes:         1: AAZYcUjhuGAJA3sXjywaEslf598.roa (hash: RBp9easJVYqUVgaIiMMNSM2ioBAAirvckRHOuxL4X0g=)
                          2: HdxT0d56LvfrK5DICRVUQUAEJIg.crl (hash: m9QU4wWOIYAia6WxI6EP1LOUMi4zEtJEcph2/AERqSU=)
                          3: KX2FVoJMwagFqXSqm7WmM6GiAdc.roa (hash: kL6N1Ap9alUNCwv0399F2Foe8bxiyXhyi55mwtllJAY=)
                          4: vMt7TQ-qRZJTqOxHDMRDIZs6N9Q.roa (hash: 3Jk3Icytf7EIaMHCfe+p0xudth/qPlKoWzoPX62k9oA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:46:f9:66:9f:8c:6e:4c:70:ce:85:16:f2:8d:86:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
        Validity
            Not Before: Dec 20 15:00:42 2025 GMT
            Not After : Dec 21 15:00:42 2025 GMT
        Subject: CN=8feb0ed5b052932cfd77fbeec81bdd5819ab44f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e3:f8:b8:e3:a1:a8:44:ec:d8:1c:62:d8:c3:
                    f5:b8:84:9b:b4:d3:47:4d:27:1d:9c:5d:73:1b:a7:
                    aa:23:da:dc:ca:98:e9:a2:f1:e9:ea:e2:0b:a4:ad:
                    38:48:f0:48:88:73:42:74:31:1e:4f:7b:4a:33:03:
                    00:dc:4a:46:49:28:81:3f:59:ea:df:83:b9:16:bd:
                    c6:0b:7d:cf:3e:0f:fa:50:94:6c:33:9b:6a:90:e9:
                    0e:c7:89:af:e2:cd:5a:f1:58:c2:8c:78:1d:c5:71:
                    89:df:4e:57:bb:d3:96:e0:25:a9:16:8c:26:76:06:
                    24:d5:51:10:b6:02:1a:1b:38:27:98:be:23:5e:b2:
                    2c:17:f4:17:81:56:a9:b5:df:74:04:84:76:65:14:
                    e7:3a:03:bc:d2:59:87:16:50:c9:c8:24:8e:1f:cb:
                    0a:da:18:10:42:78:85:fc:65:89:11:21:95:02:cf:
                    ea:aa:25:7c:4f:8d:41:77:35:f0:48:b2:05:62:09:
                    24:1b:95:b0:28:32:ea:b4:f5:b0:3e:08:3e:b4:42:
                    8e:c6:73:84:e7:9b:22:e2:52:b8:83:31:08:0d:eb:
                    3f:5d:42:7e:c3:17:da:57:76:f6:52:9c:10:43:4a:
                    e0:8b:6c:6a:f7:98:92:b9:e8:95:22:16:95:40:16:
                    c7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:EB:0E:D5:B0:52:93:2C:FD:77:FB:EE:C8:1B:DD:58:19:AB:44:F2
            X509v3 Authority Key Identifier:
                keyid:1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:c2:d7:05:88:68:6e:97:c2:59:c8:b4:3d:b3:cc:61:04:e5:
         b7:cd:69:10:d3:30:bc:d7:85:15:84:fd:71:7a:07:60:3c:42:
         02:3a:09:6e:d2:4d:f6:18:ca:18:e0:6c:14:0c:cf:8e:08:13:
         8c:da:53:4b:67:4c:6b:ee:2a:da:8b:b0:9f:e9:23:96:7a:29:
         0f:e8:7b:38:ec:a1:b2:33:f0:3c:af:d3:60:c3:b6:ca:1c:15:
         6d:7b:23:1f:e3:06:25:3e:b6:49:32:00:dc:d7:5c:7d:ad:b8:
         00:de:28:37:61:63:4c:69:75:06:ff:78:49:8a:19:25:36:18:
         6a:07:ca:af:24:22:42:8b:6f:e1:26:42:f3:33:d9:aa:fb:76:
         6f:47:da:0c:d4:df:16:dd:fb:06:c3:72:83:20:9c:55:59:4d:
         6a:70:f8:49:24:38:70:33:52:7a:39:da:d7:c9:a6:a9:16:1d:
         b2:1c:8d:3b:5b:de:91:05:ed:56:35:6a:48:31:ba:63:ce:2a:
         82:5b:c4:ae:2e:4c:c4:d0:ff:5a:4d:3a:c6:e4:3c:75:e4:f0:
         de:94:b5:e0:2a:40:9e:c7:60:c7:c8:66:48:87:5e:e5:41:0d:
         7a:53:88:a1:57:d9:bb:0c:3a:51:2b:2a:a1:40:af:cb:87:7e:
         cb:c2:29:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs8Rvlmn4xuTHDOhRbyjYYtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkZGM1M2QxZGU3YTJlZjdlYjJiOTBjODA5MTU1NDQxNDAw
NDI0ODgwHhcNMjUxMjIwMTUwMDQyWhcNMjUxMjIxMTUwMDQyWjAzMTEwLwYDVQQD
Eyg4ZmViMGVkNWIwNTI5MzJjZmQ3N2ZiZWVjODFiZGQ1ODE5YWI0NGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOP4uOOhqETs2Bxi2MP1uISbtNNH
TScdnF1zG6eqI9rcypjpovHp6uILpK04SPBIiHNCdDEeT3tKMwMA3EpGSSiBP1nq
34O5Fr3GC33PPg/6UJRsM5tqkOkOx4mv4s1a8VjCjHgdxXGJ305Xu9OW4CWpFowm
dgYk1VEQtgIaGzgnmL4jXrIsF/QXgVaptd90BIR2ZRTnOgO80lmHFlDJyCSOH8sK
2hgQQniF/GWJESGVAs/qqiV8T41BdzXwSLIFYgkkG5WwKDLqtPWwPgg+tEKOxnOE
55si4lK4gzEIDes/XUJ+wxfaV3b2UpwQQ0rgi2xq95iSueiVIhaVQBbH7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/rDtWwUpMs/Xf77sgb3VgZq0TyMB8GA1UdIwQY
MBaAFB3cU9Heei736yuQyAkVVEFABCSIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGR4VDBkNTZMdmZySzVESUNSVlVRVUFFSklnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy81NTc0MTQtZDk5My00Y2JmLTgxODEt
NDg2NzFmYjdkMzgwLzEvSGR4VDBkNTZMdmZySzVESUNSVlVRVUFFSklnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy81NTc0MTQtZDk5My00Y2JmLTgxODEtNDg2NzFmYjdkMzgw
LzEvSGR4VDBkNTZMdmZySzVESUNSVlVRVUFFSklnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC8LXBYho
bpfCWci0PbPMYQTlt81pENMwvNeFFYT9cXoHYDxCAjoJbtJN9hjKGOBsFAzPjggT
jNpTS2dMa+4q2ouwn+kjlnopD+h7OOyhsjPwPK/TYMO2yhwVbXsjH+MGJT62STIA
3Ndcfa24AN4oN2FjTGl1Bv94SYoZJTYYagfKryQiQotv4SZC8zPZqvt2b0faDNTf
Ft37BsNygyCcVVlNanD4SSQ4cDNSejna18mmqRYdshyNO1vekQXtVjVqSDG6Y84q
glvEri5MxND/Wk06xuQ8deTw3pS14CpAnsdgx8hmSIde5UENelOIoVfZuww6USsq
oUCvy4d+y8IpHA==
-----END CERTIFICATE-----
Generated at Sat Dec 20 22:50:11 2025 by rpki-client